Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/FCwqRWCHgP2JV0NWd41b9Db1DFM.roa
File: FCwqRWCHgP2JV0NWd41b9Db1DFM.roa (raw, json)
Hash identifier: X6dqVEy3o1rQ3NGHReFBtpe0GNNwKhmS3zzND4jxWio=
Subject key identifier: 14:2C:2A:45:60:87:80:FD:89:57:43:56:77:8D:5B:F4:36:F5:0C:53
Certificate issuer: /CN=be1a887e7653a2de44f13163e187037326a29a03
Certificate serial: 018CC348D4E7E72B6BF383C6E1FC34C74C08
Authority key identifier: BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/FCwqRWCHgP2JV0NWd41b9Db1DFM.roa
Signing time: Mon 01 Jan 2024 04:29:39 +0000
ROA not before: Mon 01 Jan 2024 04:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12521
IP address blocks: 5.199.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:d4:e7:e7:2b:6b:f3:83:c6:e1:fc:34:c7:4c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1a887e7653a2de44f13163e187037326a29a03
Validity
Not Before: Jan 1 04:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=142c2a45608780fd89574356778d5bf436f50c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:53:da:c7:95:d8:e4:59:d7:78:8b:35:b4:cb:
a1:d7:2e:45:68:5e:45:b3:26:d8:79:99:3d:c7:a4:
2b:7f:9e:50:86:83:4e:58:bc:f1:b4:8b:4a:cd:ee:
e3:be:75:a2:1d:3a:df:2a:2e:ca:00:bf:e0:2a:d8:
ed:62:21:ac:d2:bd:5e:cb:3b:9f:af:36:7d:66:a5:
89:6b:58:c7:1e:15:73:f3:f5:1c:ff:8a:4a:7f:de:
5e:69:23:48:75:bf:23:a3:a0:55:12:46:15:10:9f:
29:ad:60:2a:92:6a:3b:5f:0f:55:dd:34:2c:42:04:
d1:8e:81:48:81:81:99:4a:d9:2f:29:dd:a6:ea:9c:
de:12:28:d2:b1:c7:a4:b7:dc:65:77:44:07:98:ad:
a6:dd:4f:92:ae:47:13:0f:f4:9d:98:41:17:fc:1a:
60:82:09:16:18:3c:2d:3d:92:3e:5f:42:2f:60:55:
6a:6e:5f:ce:be:99:cc:c6:09:6b:4d:fa:6c:39:cf:
7a:bb:93:49:6f:1f:ea:20:d4:da:bc:cd:d2:f1:08:
6b:60:f0:02:29:23:e9:9b:33:db:72:b4:35:03:ef:
20:67:41:aa:cb:7a:0d:2f:fe:61:f9:77:e1:b2:1c:
c1:1c:a9:d5:5d:1c:19:f0:9b:1e:a4:b1:68:a3:8a:
51:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2C:2A:45:60:87:80:FD:89:57:43:56:77:8D:5B:F4:36:F5:0C:53
X509v3 Authority Key Identifier:
keyid:BE:1A:88:7E:76:53:A2:DE:44:F1:31:63:E1:87:03:73:26:A2:9A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhqIfnZTot5E8TFj4YcDcyaimgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/FCwqRWCHgP2JV0NWd41b9Db1DFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8b443e-f3c8-4ba0-9e96-86c541ca9d71/1/vhqIfnZTot5E8TFj4YcDcyaimgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.224.0/21
Signature Algorithm: sha256WithRSAEncryption
85:59:38:bc:05:f5:ee:11:a1:3a:5e:d2:41:dd:2e:de:26:f1:
ca:2d:94:5f:e7:08:00:95:0c:7f:dd:a6:08:c3:1c:f2:be:1c:
d8:bf:f0:3f:ed:15:55:36:4e:52:17:1b:4c:74:d3:84:99:c1:
a7:e3:75:ba:a5:9d:e0:60:32:fe:1a:c4:d5:1d:b0:3b:ab:d9:
e7:6e:a1:ba:a7:09:cb:5f:1a:d4:e9:e6:7b:1c:ae:fc:15:bf:
12:8c:f7:45:08:66:23:44:51:15:04:f7:4d:47:8f:33:26:0b:
4e:be:f7:3a:a2:cf:22:d7:c3:74:88:b7:80:6a:8e:91:14:1c:
c5:11:7d:54:c7:75:60:9f:4f:0d:3b:8c:09:66:79:72:39:99:
30:90:48:bd:42:4b:52:cc:5b:66:bd:44:3c:8e:00:0e:f1:6e:
a1:66:ac:05:31:88:55:f0:bf:55:ac:63:68:2a:a5:ea:c0:4f:
79:90:4f:05:ef:3c:37:40:ac:d0:f8:1a:d4:be:09:55:b6:8c:
63:5d:32:70:ed:83:c7:32:2e:9d:e2:c4:01:02:09:3e:5b:be:
2f:1b:b3:fc:be:cd:47:4e:90:dd:cd:b8:a0:b5:ed:ca:a8:37:
69:ce:be:31:46:7a:2e:73:fb:7e:c3:c4:01:00:6f:a8:5b:aa:
0d:bf:68:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:41:13 2024 by rpki-client on console-ams.rpki-client.org